How smartphone apps are sharing precise location data with 75+ companies, including advertisers, retailers, and hedge funds, up to 14K times a day
Dozens of companies use smartphone locations to help advertisers and even hedge funds. They say it's anonymous, but the data shows how personal it is.
Context & Ripple Effects
This investigation lands mid-arc in a documented pipeline: two months earlier, researchers had caught [[a:933188|24 popular iOS apps shipping GPS, Bluetooth beacon, and Wi-Fi identifiers straight to data-monetization firms]], and a November profile showed how Thasos turns coordinates leased from ~1,000 apps into signals sold to Wall Street traders.
What the Times adds is scale on the supply side — one phone pinging dozens of buyers thousands of times a day — which matters because the buyers are no longer just advertisers but hedge funds pricing foot traffic. The follow-on coverage confirms the stakes: a later leaked dataset logging 12M+ Americans' movements punctured the anonymity defense, and the sector matured into a $12B industry of collectors, aggregators, and marketplaces.
First-order effects
- App users are the direct source: their precise movements flow to 75+ downstream companies — advertisers, retailers, and hedge funds — at volumes up to 14,000 pings a day per device, far beyond what a permissions screen suggests.
- Hedge funds and their data vendors get an immediate edge: granular, near-real-time location feeds become an input for trading decisions, extending the Thasos model from one vendor to a crowded buyer pool.
Second-order effects
- The 'anonymous' framing becomes the industry's load-bearing claim and its weakest point — once datasets this dense leak or get cross-referenced, re-identification risk forces every aggregator and marketplace in the chain to defend practices they marketed as harmless.
- App developers face a pricing decision the ecosystem had left implicit: location SDKs are a revenue line, so every app update becomes a negotiation between monetization payouts and user trust, with the data brokers competing to sign exclusive supply.
Third-order effects
- If the pattern holds, location data consolidates from scattered app-level collection into professionalized intermediaries — collectors feeding aggregators feeding marketplaces — where each layer dilutes accountability and no single company owns the privacy failure.
- The gap between what 'consent' covers at install time and how data is actually resold points toward regulatory intervention treating precise location as a sensitive category distinct from ordinary analytics, with the leaked-dataset episodes as the case law.
The trend: Precise smartphone location is shifting from an advertising byproduct into a traded commodity asset class, with commercial demand outpacing the anonymity and consent safeguards meant to govern it.